At Trilvexa LLC, accessible from https://trilvexa.com, we are committed to protecting the privacy and security of the personal data of our customers and website visitors. While Trilvexa LLC is based in the United States, we recognize and adhere to the principles of the General Data Protection Regulation (GDPR) for individuals residing in the European Union (EU) or European Economic Area (EEA).

This statement outlines our commitment to processing personal data lawfully, fairly, and transparently, in accordance with GDPR requirements, when applicable.

1. Data Controller 

Trilvexa LLC acts as the "Data Controller" for the personal data you provide to us through our website. Our contact details are:

2. Personal Data We Collect 

We collect personal data that is necessary for processing orders, providing customer support, and improving your shopping experience. This may include:

  • Identity Data: Name, title.
  • Contact Data: Billing address, shipping address, email address, telephone numbers.
  • Financial Data: Payment card details (processed securely by third-party payment processors like Stripe and PayPal, we do not store full card numbers).
  • Transaction Data: Details about payments to and from you and other details of products you have purchased from us.
  • Technical Data: Internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.
  • Profile Data: Your username and password (if you create an account), purchases or orders made by you, your interests, preferences, feedback, and survey responses.
  • Usage Data: Information about how you use our website, products, and services.
  • Marketing and Communications Data: Your preferences in receiving marketing from us and our third parties and your communication preferences.

3. Lawful Basis for Processing 

We process your personal data under the following lawful bases, as permitted by GDPR:

  • Performance of a Contract: To fulfill orders you place, process payments, and deliver products to you.
  • Legitimate Interests: To operate and improve our business, provide customer service, prevent fraud, and enhance the security of our website. This includes analyzing website usage to improve user experience and product offerings.
  • Consent: Where you have given clear consent for us to process your personal data for a specific purpose, such as sending marketing communications. You have the right to withdraw consent at any time.
  • Legal Obligation: Where processing is necessary to comply with a legal or regulatory obligation.

4. How We Use Your Personal Data 

Your personal data is used to:

  • Process and deliver your orders, including managing payments, fees, and charges.
  • Manage your account and our relationship with you.
  • Provide customer support and respond to your inquiries.
  • Personalize your shopping experience.
  • Send you marketing communications (if you have opted in).
  • Improve our website, products, and services.
  • Detect and prevent fraud and enhance security.
  • Comply with legal obligations.

5. Sharing Your Personal Data 

We may share your personal data with trusted third parties to help us provide our services:

  • Service Providers: Companies that provide services to us, such as payment processing (Stripe, PayPal), shipping (e.g., USPS, FedEx), website hosting, data analytics, and marketing services. These providers are obligated to protect your data and only use it for the purposes we specify.
  • Legal & Regulatory Authorities: When required by law or to protect our rights, property, or safety, and the rights, property, or safety of others.

We do not sell your personal data to third parties.

6. International Transfers 

As Trilvexa LLC is based in the US, any data collected from EU/EEA residents may be transferred to and stored in the United States. We ensure that such transfers comply with GDPR by relying on appropriate safeguards, such as standard contractual clauses or other legally recognized mechanisms, to ensure your data receives an adequate level of protection.

7. Data Security 

We have implemented appropriate technical and organizational security measures to protect your personal data from accidental loss, unauthorized access, alteration, disclosure, or destruction. We limit access to your personal data to employees, agents, contractors, and other third parties who have a business need to know. They will only process your personal data on our instructions and are subject to a duty of confidentiality.

8. Data Retention 

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. This typically includes retaining transaction data for a minimum of 7 years for tax and audit purposes.

9. Your GDPR Rights (for EU/EEA Residents) 

If you are an EU/EEA resident, you have the following rights concerning your personal data:

  • Right to Access: You have the right to request copies of your personal data.
  • Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
  • Right to Erasure ("Right to be Forgotten"): You have the right to request that we erase your personal data, under certain conditions.
  • Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
  • Right to Object to Processing: You have the right to object to our processing of your personal data, under certain conditions.
  • Right to Data Portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
  • Right to Withdraw Consent: Where we rely on consent to process your personal data, you have the right to withdraw that consent at any time.

To exercise any of these rights, please contact us at support@trilvexa.com or by phone at +1 (734) 775-6984. We will respond to your request within one month.

10. Right to Lodge a Complaint 

If you believe that Trilvexa LLC has not complied with your data protection rights, you have the right to lodge a complaint with a supervisory authority in the EU/EEA member state of your habitual residence, place of work, or place of the alleged infringement.

11. Changes to This GDPR Compliance Statement 

We may update this statement from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this statement periodically for any updates.